Cisco Cisco ASR 5000
Crypto Map IPSec IKEv1 Configuration Mode Commands
match address ▀
Command Line Interface Reference, StarOS Release 18 ▄
2989
priority
Specifies the preference of the ACL. The ACL preference is factored when a single packet matches the
criteria of more than one ACL.
The preference is an integer value from 0 to 4294967295; 0 is the highest priority. Default: 0
criteria of more than one ACL.
The preference is an integer value from 0 to 4294967295; 0 is the highest priority. Default: 0
Important:
The priorities are only compared for ACLs matched to other crypto maps or to policy ACLs (those
applied to the entire context).
Usage
ACLs matched to crypto maps are referred to as crypto ACLs. Crypto ACLs define the criteria that must be
met in order for a subscriber data packet to routed over an IPSec tunnel.
Prior to routing, the system examines the properties of each subscriber data packet. If the packet properties
match the criteria specified in the crypto ACL, the system will initiate the IPSec policy dictated by the crypto
map.
met in order for a subscriber data packet to routed over an IPSec tunnel.
Prior to routing, the system examines the properties of each subscriber data packet. If the packet properties
match the criteria specified in the crypto ACL, the system will initiate the IPSec policy dictated by the crypto
map.
Example
The following command sets the crypto map ACL to the ACL named
ACLlist1
and sets the crypto maps
priority to the highest level.
match address ACLlist1 0